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IN THE CLAIMS: 

The text of all pending claims, (including withdrawn claims) is set forth below. Cancelled 
and not entered claims are indicated with claim number and status only. The claims as listed 
below show added text with underlining and deleted text with str i koth rough . The status of each 
claim is indicated with one of (original), (currently amended), (cancelled), (withdrawn), (new), 
(previously presented), or (not entered). 

Please AMEND and ADD new claims in accordance with the following: 

1 . (Currently Amended) A security management device including: 

a security detection unit to detect detecting a security level of a user apparatus, based 
upon an access record of the user apparatus accessing a virus information computer ; 

a judging unit j udg i ng to judge whether the security level of the user apparatus reaches a 
predetermined security level; and 

an access control unit, in case the judging unit judges the security level of the user 
apparatus does not reach the predetermined security level, re str i ct i ng to restrict as a restriction 
range an access permission range on a network [[by]]of the user apparatus to be within a range 
on a network to which a security setting guide server management device belongs . 

2. (Previously Presented) A security management device according to Claim 1 , 
wherein the access control unit, in case the judging unit judges that the security level of the user 
apparatus reaches the predetermined level, sets a range wider than the restriction range as the 
access permission range of the user apparatus. 

3. (currently amended) A security management device according to Claim 1 , 
wherein the access control unit has a function of controlling a communication route of the user 
apparatus and, in case the judging unit judges that the security level of the user apparatus does 
not reach the predetermined level, as the restriction range controls a communication destination 
of the user apparatus to a spoc i f i od the security setting guide server management device i n tho 
rostr i ct i on rango on tho network . 

4. (currently amended) A security management device according to Claim 3, 
wherein the spoc i f i od securitv setting guide server management device controls updating the 
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virus definition file of the user apparatus. 

5. (currently amended) A method of managing computer security comprising: 
detecting a security level of a user apparatus, based upon an access record of the user 

apparatus accessing a virus information computer; 

judging whether the security level of the user apparatus reaches a predetermined 
security level; and 

in case of judging the security level of the user apparatus does not reach the 
predetermined security level, restricting an access permission range on a network of the user 
apparatu s to be within a range on a network to which a security setting guide server 
management device belongs . 

6. (Previously Presented) A security management method according to Claim 5, 
wherein in case of judging the security level of the user apparatus reaches the predetermined 
level, setting a range wider than the restriction range as the access permission range of the user 
apparatus. 

7. (currently amended) A security management method according to Claim 5, 
wherein in case of judging the security level of the user apparatus does not reach the 
predetermined level, the restricting of the access permission range of the user apparatus 
comprises changing a communication destination of the user apparatus to a sp e c i f ie d the 
security setting guide server management device on the network. 

8. (currently amended) A security management method according to Claim 7, 
wherein the sp e c i f ie d security setting guide server management device controls updating the 
virus definition file of the user apparatus. 

9. (currently amended) A recording medium recorded with a security management 
program for making a computer execute: 

detecting a security level of a user apparatus, based upon an access record of the user 
apparatus accessing a virus information computer; 

judging whether the security level of the user apparatus reaches a predetermined 
security level; and 
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in case of judging the security level of the user apparatus does not reach the 
predetermined security level, restricting an access permission range on a network of the user 
apparatu s to be within a range on a network to which a security setting guide server 
management device belongs 

1 0. (Previously Presented) A recording medium recorded with a security 
management program according to Claim 9, wherein in case of judging the security level of the 
user apparatus reaches the predetermined security level, setting a range wider than the 
restriction range as the access permission range of the user apparatus. 

1 1 . (currently amended) A recording medium recorded with a security management 
program according to Claim 9, wherein in case of judging the security level of the user apparatus 
does not reach the predetermined security level, the restricting of the access permission range 
of the user apparatus comprises changing a communication destination of the user apparatus to 
a sp e c i f ie d the security setting guide server management device on the network. 

1 2. (currently amended) A recording medium recorded with a security management 
program according to Claim 11 , wherein the sp e c i f ie d securitv setting guide server management 
device controls updating the virus definition file of the user apparatus. 

13. (currently amended) A security management system comprising: 

a security management device, an apparatus for a user and a security setting guide 
device in communication via a network, 

wherein the security management device comprises: 

a security detection unit detecting a security level of a user apparatus, based 
upon an access record of a user apparatus accessing a virus information computer; 

a judging unit judging whether the security level of the user apparatus reaches a 
predetermined security level; and 

an access control unit, in case the judging unit judges the security level of the 
user apparatus does not reach the predetermined security level, restricting an access 
permission range on a network [[by]]of the user apparatus to be within a range on a network to 
which the security setting guide server management device belongs . 
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1 4. (Previously Presented) A security management system according to Claim 1 3, 
wherein the access control unit, in case the judging unit judges the security level of the user 
apparatus does not reach the predetermined security level, connects the user apparatus to the 
security setting guide device. 

15. (currently amended) A security management device including: 
a controller 

determining a security level of a user terminal upon a network access for the user 
terminal, based upon one or more of an access record of the user terminal accessing a virus 
information computer, security information updating history of the user terminal, port access 
information of the user terminal, programs and/or scripts downloaded and/or executable at the 
user terminal, or responsiveness to a command by the user terminal, and 

ensuring a predetermined security level on the network, according to the 
determined security level of the user terminal, 

wherein when a security level of the user terminal does not reach the 
predetermined security level, the ensuring of the predetermined security level includes restricting 
an access permission range on a network of the user terminal to be within a range on a network 
to which a specified device belongs . 

16. (Cancelled) 

1 7. (currently amended) The security management device of claim 1 5, wherein the 
ensuring of the predetermined security level on the network comprises guiding by the specified 
device the user terminal to meet the predetermined security level. 

1 8. (currently amended) The security management device of claim 1 5, wherein-tbe 
e nsur i ng of th e pr e d e t e rm i n e d s e cur i ty le v e l on th e n e twork compr i s e s i f th e s e cur i ty le v el of th e 
us e r t e rm i na l do e s not r e ach th e pr e d e t e rm i ned secur i ty le v el, the_restricting of_an access 
permission range on the network of the user terminal includes controlling a communication 
destination of the user terminal to a security setting guide server management device . 

1 9. (Previously Presented) The security management device according to Claim 1 , 
wherein the user apparatus is established to afford the network. 
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20. (currently amended) The security management device according to claim 1 , 
wherein the access control unit, in case the judging unit judges that the security level of the user 
apparatus has reached the predetermined security level, dosedoes not restrict the access 
permission range on the network [[by]]of the user apparatus. 

21 . (Previously Presented) The security management method according to Claim 5, 
wherein the user apparatus is established to afford the network. 

22. (currently amended) The security management method according to claim 5, 
wherein in the case when it is judged that the security level of the user apparatus has reached 
the predetermined security level, the access permission range on the network [[by]]of the user 
apparatus is not restricted. 

23. (Previously Presented) The security management system according to Claim 1 3, 
wherein the user apparatus is established to afford the network. 

24. (currently amended) The security management system according to claim 1 3, 
wherein the access control unit of the security management system, in case the judging unit 
judges that the security level of the user apparatus has reached the predetermined security 
level, dose does not restrict the access permission range on the network [[by]]of the user 
apparatus. 

25. (Previously Presented) The security management device according to Claim 1 5, 
wherein the user apparatus is established to afford the network. 

26. (currently amended) The security management device according to claim 1 5, 
wherein the controller, when determined by the e nsur i ng that the security level of the user 
apparatus has reached the predetermined security level, the ensuring of the predetermine 
security level includes does-not r e str i ct restrictinq an access permission range on the network 
[[by]]of the user apparatus. 

27. (currently amended) A method of managing security of a computer network to 
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which a user terminal is communicably connected, comprising: 

determining a security level of the user terminal upon access to the network from the 
user terminal, based upon an access record of the user terminal accessing a virus information 
computer, security information updating history of the user terminal, port access information of 
the user terminal, programs and/or scripts downloaded and/or executable at the user terminal, 
responsiveness to a command by the user terminal, or any combinations thereof and 

ensuring a security level on the network, according to the determined security level of the 
user terminal, 

wherein when a security level of the user terminal does not reach the predetermined 
security level, the ensuring of the security level includes restricting an access permission range 
on a network of the user terminal to be within a range on a network to which a specified device 
belongs . 

28. (Previously Presented) A security management device according to claim 1 , 
wherein the detecting is based upon whether the user apparatus accesses the virus information 
computer at a predetermined interval. 

29. (New) A security management device comprising: 

a security detection unit to detect a security level of a user apparatus, based upon a virus 
definition file of the user apparatus; 

a judging unit to judge whether the security level of the user apparatus reaches a 
predetermined security level; and 

an access control unit to restrict an access permission range on a network of the user 
apparatus within a first range on a network to which a security setting guide server management 
device belongs when the judging unit judges the security level of the user apparatus does not 
reach the predetermined security level, and to set the access permission range on the network 
to a second range that exceeds the first range when the judging unit judges the security level of 
the user apparatus reaches the predetermined security level. 

30. (New) The security management device according to claim 29, wherein the 
access control unit restricts the user apparatus to access and/or become accessible to 
apparatuses within the first range on the network including the security management device and 
an apparatus that provides the virus definition file to the user apparatus. 



7 



